OpenIDConnect playground algorithm issue

[reece1]

The header in the Id_token that openidconnect.net produces says that the algorithm is HS256

{
  "alg": "HS256",
  "typ": "JWT"
}

However the JWKS doesn’t have HS256

So I can’t validate the signature, any idea if I’m doing something wrong or is this tool borked?

Thanks

[rueben.tiow]

Hi @reece1,

I recommend going to your Application settings > Advanced Settings > OAuth and setting the JSON Web Token (JWT) Signature Algorithm option to RS256.

That should generate RS256 JWT tokens.

Let me know if you have any further questions.

Thanks,
Rueben